Arquitecto de Soluciones – Cloud & Backend Engineer, AWS – Seguridad, Keycloak

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Support security architecture, backend, and cloud infrastructure decisions in collaboration with the product team.

• Design and implement microservices using Java/Quarkus and Node.js or Python, utilizing REST APIs and event-driven architectures.

• Manage AWS infrastructure: EKS/ECS Fargate, Lambda, DynamoDB, Aurora, ElastiCache, Kinesis, S3, CloudFront, and WAF.

• Build and maintain web/mobile tracking SDKs with support for batching, retries, and event versioning.

• Define and maintain Infrastructure as Code (IaC) using Terraform or CloudFormation; oversee CI/CD pipelines and observability with CloudWatch.

• Conduct code reviews focusing on security, performance, and maintainability.

• Document security decisions and train the team on IAM best practices.

• Act as a liaison between the technical team and stakeholders: communicate risks, technical debt, and architectural decisions (ADRs).

⛳️ Requirements

• A minimum of 5 years of experience in backend and cloud infrastructure roles.

• Degree in Systems Engineering, Software Engineering, Electronics, or related fields.

• Proven experience in designing and implementing authentication and authorization flows with Keycloak in production environments.

• Demonstrated experience in configuring realms, clients, roles, scopes, and mappers in Keycloak according to the system's requirements.

• Proven experience in implementing and validating OAuth2 flows (Authorization Code, Client Credentials, Device Flow) and OIDC.

• Management of JWT tokens: issuance, validation, rotation, expiration, and secure revocation.

• Experience configuring service-to-service communication with mTLS to ensure mutual authentication.

• Experience conducting security configuration audits, breach detection, and proactively implementing improvements.

• Documentation of security decisions and training the team on IAM best practices.

• Desirable: AWS Certifications (SAA, SAP, or Security Specialty).

• Experience with analytics platforms, CDP, or large-scale tracking systems.

• Knowledge of GraalVM / native builds with Quarkus.

🏝️ Benefits

• Work mode: 100% Remote

• Excellent work environment

• Young, dynamic, and committed team

• Opportunities for growth

• Participation in innovative projects